This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/PCyrz_7gQySJ-l_QlnLaYZdnukM.roa File: PCyrz_7gQySJ-l_QlnLaYZdnukM.roa (raw, json) Hash identifier: 8qLUqfkbCxjZKisO86t69Q/KwJjfGVGdDtnDpf4H3cE= Subject key identifier: 3C:2C:AB:CF:FE:E0:43:24:89:FA:5F:D0:96:72:DA:61:97:67:BA:43 Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Certificate serial: 019B7AC7948D8D337B342626BACFBABC631C Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/PCyrz_7gQySJ-l_QlnLaYZdnukM.roa Signing time: Thu 01 Jan 2026 18:17:38 +0000 ROA not before: Thu 01 Jan 2026 18:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 185.240.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:94:8d:8d:33:7b:34:26:26:ba:cf:ba:bc:63:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b Validity Not Before: Jan 1 18:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c2cabcffee0432489fa5fd09672da619767ba43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:09:77:f4:19:30:4f:65:cd:68:f0:44:5c:20: 56:26:c9:0c:76:c3:0c:5c:ca:17:cb:29:c7:e3:03: 54:5d:16:33:20:a9:08:78:ff:f0:94:05:7c:e6:97: 20:fd:29:c0:10:58:44:4c:a0:47:8d:8c:3e:20:bb: 55:f3:2c:6d:03:75:bf:b2:86:5e:b2:38:cc:94:60: 26:2b:17:0c:ae:5f:92:f2:52:20:d6:5c:e6:65:68: 7a:6b:cc:5e:1a:a2:e0:90:5d:00:2f:6d:36:1b:d0: 84:5d:30:17:24:08:98:3e:28:4d:75:8d:dd:db:11: f0:c8:0f:5a:f6:27:55:f9:cb:ce:48:0c:c0:4c:a3: fd:70:68:3b:d7:97:c5:53:bb:7e:45:2e:63:69:6f: ac:ac:93:62:e4:60:8b:74:99:a3:81:4e:00:2f:94: 57:f3:f5:31:7a:96:83:bd:95:f7:af:2f:80:f6:8e: 77:a1:3c:1e:d4:3c:3b:f7:b2:f4:d0:5d:25:af:e5: 7f:19:8b:41:1f:78:58:4c:01:ac:39:4d:9c:97:20: 63:e7:31:7c:f8:9b:89:03:d3:98:64:ce:80:99:d3: 57:3d:ac:ba:7e:ad:8f:87:53:49:ba:33:bb:06:8d: a0:0d:4b:af:0b:07:04:0c:0f:cb:be:26:1b:28:6b: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2C:AB:CF:FE:E0:43:24:89:FA:5F:D0:96:72:DA:61:97:67:BA:43 X509v3 Authority Key Identifier: keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/PCyrz_7gQySJ-l_QlnLaYZdnukM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.128.0/22 Signature Algorithm: sha256WithRSAEncryption 33:f9:d1:38:d9:60:f7:0f:72:80:89:f1:8d:f0:ab:1f:aa:7e: 9a:12:9a:b5:de:31:67:1b:93:65:d4:d2:6d:de:a1:93:a3:9c: 01:30:f4:55:36:78:fc:14:7a:b8:c2:db:46:e8:7d:37:77:a3: 19:4f:e6:fd:12:d3:2d:ee:37:96:ce:51:12:1b:4d:0e:58:66: 51:31:01:7a:17:3d:15:c2:a2:63:5c:80:02:96:ef:8c:ca:c2: 08:bb:b8:e1:3b:47:ee:0d:4c:b8:8d:44:04:4f:c6:9a:c4:c7: ea:09:a0:12:49:b8:08:8e:21:b9:be:4a:28:37:2f:3a:c8:ad: 36:45:4b:1e:4b:33:7d:94:3c:b2:f9:ad:54:d7:51:eb:9e:ea: df:b8:91:42:27:ab:95:bd:01:7d:ae:f5:a6:b3:7f:8e:5f:e0: c0:3b:2b:cc:8c:95:34:e2:f6:4f:fd:c6:20:62:2d:f0:20:de: d9:f6:08:b8:ac:81:c1:de:13:33:c5:a2:d7:fe:9a:9c:5d:0e: 7f:d5:a8:4f:07:fd:39:d3:f4:1b:50:49:87:7c:e2:af:70:b0: 7e:55:81:40:0f:bd:7b:2e:d7:8c:3c:6e:a8:fb:b7:ae:64:e0: a7:43:ed:cc:db:7e:9c:7a:dd:66:66:2c:e2:27:3e:34:3b:dc: 5f:b1:10:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5SNjTN7NCYmus+6vGMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZDYzMTU2YzE4MzZmMTZjM2I0MzBlZmZiYjcyYWM2OTkz MmVhOWIwHhcNMjYwMTAxMTgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzJjYWJjZmZlZTA0MzI0ODlmYTVmZDA5NjcyZGE2MTk3NjdiYTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gl39BkwT2XNaPBEXCBWJskMdsMM XMoXyynH4wNUXRYzIKkIeP/wlAV85pcg/SnAEFhETKBHjYw+ILtV8yxtA3W/soZe sjjMlGAmKxcMrl+S8lIg1lzmZWh6a8xeGqLgkF0AL202G9CEXTAXJAiYPihNdY3d 2xHwyA9a9idV+cvOSAzATKP9cGg715fFU7t+RS5jaW+srJNi5GCLdJmjgU4AL5RX 8/UxepaDvZX3ry+A9o53oTwe1Dw797L00F0lr+V/GYtBH3hYTAGsOU2clyBj5zF8 +JuJA9OYZM6AmdNXPay6fq2Ph1NJujO7Bo2gDUuvCwcEDA/LviYbKGv6bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDwsq8/+4EMkifpf0JZy2mGXZ7pDMB8GA1UdIwQY MBaAFNnWMVbBg28Ww7Qw7/u3KsaZMuqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt ZmRhMDExZTVjOTcyLzEvUEN5cnpfN2dReVNKLWxfUWxuTGFZWmRudWtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy LzEvMmRZeFZzR0RieGJEdEREdi03Y3F4cGt5NnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufCAMA0G CSqGSIb3DQEBCwUAA4IBAQAz+dE42WD3D3KAifGN8Ksfqn6aEpq13jFnG5Nl1NJt 3qGTo5wBMPRVNnj8FHq4wttG6H03d6MZT+b9EtMt7jeWzlESG00OWGZRMQF6Fz0V wqJjXIAClu+MysIIu7jhO0fuDUy4jUQET8aaxMfqCaASSbgIjiG5vkooNy86yK02 RUseSzN9lDyy+a1U11HrnurfuJFCJ6uVvQF9rvWms3+OX+DAOyvMjJU04vZP/cYg Yi3wIN7Z9gi4rIHB3hMzxaLX/pqcXQ5/1ahPB/050/QbUEmHfOKvcLB+VYFAD717 LteMPG6o+7euZOCnQ+3M236cet1mZiziJz40O9xfsRA6 -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:21 2026 by rpki-client